Hybrid Information Assurance Engineer

at SES Corporation

• Job title: Information Assurance Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Cyber Security, Google Cloud Platform, Oracle
• Location requirements: Hybrid, Hanscom Air Force Base, United States

About the role

• Information Assurance (IA) Engineer providing risk management and cybersecurity support for U.S. Air Force Cloud One. Collaborating with government and engineering teams to ensure compliance and improve security posture.

Responsibilities

• Develop, update, and maintain RMF authorization artifacts in accordance with DoDI 8510.01 and NIST SP 800-53.
• Provide RMF-required documentation and artifacts to Government ISSO/ISSM in support of Assessment & Authorization (A&A) activities.
• Maintain and update System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), POA&Ms, and supporting documentation.
• Support migration of security control baselines from NIST SP 800-53 Rev 4 to Rev 5, including control re-mapping, gap analysis, control implementation updates, and SSP/POA&M artifact revisions within DoD RMF processes.
• Support Continuous Authorization to Operate (cATO) within a DevSecOps or cloud-based environment, including implementation of automated control validation, continuous monitoring integration, and real-time POA&M management.
• Support ATO maintenance and sustainment activities for C1 and DPaaS environments.
• Support Authority to Use (ATU) conditions and remediation tracking as directed by the AO.
• Assist Government ISSO/ISSM with maintaining compliance with:
• DoDI 8500.01 (Cybersecurity)
• DoDI 8510.01 (RMF)
• AFI 17-101 (RMF)
• DoD Cloud Computing SRG
• DISA STIG/SRG
• CNSSI 1253
• Support security control assessments, audit readiness, and third-party cybersecurity inspections.
• Maintain audit log configuration, monitoring, and retention compliance.
• Support incident reporting and documentation in accordance with DFARS 252.204-7012 and 252.239-7010.
• Ensure compliance with SCCA and Cloud SRG requirements.
• Support secure configuration of AWS, Azure, Oracle, and GCP cloud environments.

Requirements

• Bachelor’s degree with 4–8 years of relevant experience, or Master’s degree with 2–6 years of relevant experience. Additional years of experience may be considered in lieu of a degree.
• Active Secret clearance at a minimum required to start.
• US citizenship required
• CompTIA Security+ (IAT Level II) or equivalent required
• Experience with USAF Cloud One or Platform 1
• Experience with Zero Trust Architecture
• Cloud certifications in AWS, Azure, Google, or Oracle clouds
• Automation experience
• Certifications: CISSP (IAT Level III) or equivalent

Benefits

• Medical
• Dental
• Vision
• AD&D
• STD
• LTD
• Company paid Life Insurance
• 401k with employer contribution
• Paid Time Off
• Pet Insurance